PowerConnect B-Series FCX Configuration Guide 122353-1002266-01How 802.1X port security works 34EAP pass-through supportEAP pass-through is supported on PowerConnect devices that have 802.1X enabled. EAPpass-through support is fully compliant with RFC 3748, in which, by default, compliant pass-throughauthenticator implementations forward EAP challenge request packets of any type, including thoselisted in the previous section.Configuration notes• If the 802.1X supplicant or authentication server will be sending packets that are greater than1500 MTU, you should configure the device to accommodate a bigger buffer size.Support for RADIUS user-name attribute in access-accept messagesDell 802.1X-enabled ports support the RADIUS User-name (type 1) attribute in the Access-Acceptmessage returned during 802.1X authentication.This feature is useful when the client/supplicant does not provide its user-name in theEAP-response/identity frame, and the username is key to providing useful information. Forexample, when the User-name attribute is sent in the Access-Accept message, it is then availablefor display in sFlow sample messages sent to a collector, and in the output of some show dot1x CLIcommands, such as show dot1x mac-sessions.To enable this feature, add the following attribute on the RADIUS server.Authenticating multiple hosts connected to the same portDell PowerConnect devices support 802.1X authentication for ports with more than one hostconnected to them. Figure 157 illustrates a sample configuration where multiple hosts areconnected to a single 802.1X port.Attribute name Type ValueUser-name 1 (string)
